Skip to content

ACCA Applied Knowledge · Business and Technology · Technological factors

A firm's board wants to protect itself against the risk of cyber-attack following the introduction of online services. Which of the following is a preventive control?

Requiring multi-factor authentication is a preventive control because it stops unauthorised users gaining access in the first place. Restoring from backup is corrective, applied after an attack, and reviewing logs after an incident is detective, as it identifies what has already happened.

  1. ARestoring systems from backup after an attack has occurred
  2. BReviewing logs after an incident to identify what happened
  3. CRequiring multi-factor authentication before users can access the systemCorrect

Explanation

Multi-factor authentication stops unauthorised access before it happens, so it is preventive. Restoring from backup is corrective and reviewing logs after an incident is detective.

Did you get it right without looking?

One question tells you little. A timed set on Technological factors shows your real accuracy, how long you take and where you lose marks.

More Technological factors questions